Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa
File: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (raw, json)
Hash identifier: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=
Subject key identifier: 58:68:85:47:E6:C6:3E:6E:89:E5:93:6E:AB:F8:B9:90:90:7A:37:3C
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 01942521D506C7870F9C0F5A3A3E11191FDD
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57167
IP address blocks: 193.0.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d5:06:c7:87:0f:9c:0f:5a:3a:3e:11:19:1f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58688547e6c63e6e89e5936eabf8b990907a373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:39:94:3d:28:88:f5:e2:63:1c:09:32:d1:84:
f9:32:93:20:2e:b1:ba:2a:ce:0c:92:f2:75:03:f2:
96:1b:9c:f5:e5:59:61:08:13:87:fa:26:dd:2f:52:
46:a5:fd:f3:f8:38:1b:40:65:a1:d7:37:cd:b2:1c:
51:19:1f:9a:a8:0c:fd:32:f6:39:58:53:e7:e6:bb:
27:25:d8:2f:f8:d8:f5:7c:69:9a:8e:2f:73:3f:8b:
5d:7b:03:84:39:ca:e4:42:02:4c:57:05:d8:6c:6e:
b4:da:28:a4:38:25:2e:8e:49:d3:19:34:2e:88:31:
ca:fd:37:a2:ae:19:20:73:55:0f:73:f0:a0:72:6c:
d5:70:9a:8c:3c:20:8e:d3:11:9b:02:e3:df:42:26:
4d:a1:33:8a:66:f1:70:c0:ca:11:7c:19:02:ba:d6:
ab:58:39:fe:72:3d:db:f0:91:12:02:c4:57:72:2d:
9f:93:49:46:74:b1:42:1d:43:48:f3:43:e8:8a:bf:
6a:d6:4a:84:a5:1c:d8:b8:0f:e9:22:75:e9:34:0d:
ac:06:0b:a0:a3:0d:02:bc:93:82:37:4c:8c:72:58:
51:30:a9:e7:65:f3:cd:a4:ed:99:6d:d1:36:05:04:
c6:a4:a4:d5:62:3f:22:97:5b:72:7e:6a:b0:0a:c9:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:85:47:E6:C6:3E:6E:89:E5:93:6E:AB:F8:B9:90:90:7A:37:3C
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.61.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c3:cf:40:37:98:4c:3c:d7:41:b3:8e:bb:9a:22:01:9f:9d:
21:53:b2:7c:77:5e:70:96:84:6b:02:53:ea:eb:be:22:dc:80:
fe:8c:6e:db:f8:50:58:db:da:dc:a5:8a:89:7a:72:b8:b8:c7:
49:75:12:b0:f2:7d:cb:b7:3e:d8:ac:e9:36:2f:de:82:57:e2:
55:cd:a9:93:46:cb:72:b9:03:2b:8e:e6:7d:f8:90:d4:d7:b8:
08:09:b2:ad:81:e9:6f:a4:a1:8c:07:fd:e3:38:15:46:99:7a:
54:68:09:59:d3:d8:33:62:e1:79:b4:82:0b:ee:62:08:b3:71:
87:f6:9c:7f:1b:7a:f2:5f:8d:b5:8b:6f:16:e1:16:a1:2d:c3:
6f:f5:a1:52:f3:05:63:3a:1d:12:68:29:32:ac:41:5c:b7:4c:
ee:98:34:00:73:a1:01:8c:66:e2:98:47:dd:b8:79:1e:db:f3:
b3:1c:a1:88:58:d9:6e:31:0f:ad:cb:6e:5c:df:99:2d:f1:0a:
38:fc:c9:38:7d:ee:33:ec:e6:44:61:a7:5f:81:b4:f1:b0:09:
70:5c:fc:c1:42:22:c6:80:7b:0d:ed:c1:fc:45:b5:aa:e7:fb:
6f:25:c3:8c:60:1f:4b:f0:58:5f:7b:ac:19:12:2e:ba:e1:56:
d7:98:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:21 2025 by rpki-client